PHP Tips

dfunc-bypasser

Takes phpinfo output as input and reports which functions are not in disable_functions, i.e. what's actually usable. Handy when the disabled list is huge.

See also Reverse Shells for PHP reverse shell payloads.